Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qpqv-mwrg-mw8j

Опубликовано: 30 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion markup language (SAML) request to the /saml/acs REST endpoint which can cause a denial of service through a crash or hang of the Splunk daemon.

In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion markup language (SAML) request to the /saml/acs REST endpoint which can cause a denial of service through a crash or hang of the Splunk daemon.

EPSS

Процентиль: 38%
0.00164
Низкий

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
nvd
больше 2 лет назад

In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion markup language (SAML) request to the `/saml/acs` REST endpoint which can cause a denial of service through a crash or hang of the Splunk daemon.

EPSS

Процентиль: 38%
0.00164
Низкий

6.3 Medium

CVSS3